Link Expander: unshorten any link
Paste a short link from bit.ly, tinyurl, t.co or anywhere else. We follow each redirect from our server and show the full destination, so you can see where it goes without opening it.
Why expand a short link first?
Short links are everywhere: in texts, emails, social posts, QR codes and printed flyers. They're convenient, but they hide the one thing you most want to know before you tap: which website you're about to visit. Scammers rely on that. A text claiming a parcel is "on hold" works far better with bit.ly/3Rk9x than with an obviously fake address like canadapost-redelivery-fee.top.
Expanding the link first takes a few seconds and shows you the real destination, so you can make a calm decision instead of a rushed one.
How the expander works
- You paste the link. We tidy it up (add
https://if it's missing) and check it's a normal public web address. - Our server requests it. Instead of following redirects automatically, we stop at each one and record the status code and the next address.
- We repeat until the chain ends, up to 10 steps. We also catch "page refresh" redirects that some shorteners use.
- We look up facts about the final site, such as when its domain name was registered, and check the address for common disguises.
- You get the full path, the final address with its page title, and a short list of anything that stands out.
The final page is never opened in your browser, so scripts, downloads or pop-ups on it can't reach you.
Reading the result
Each numbered step is one stop on the way. The small label under each address shows the server's response: 301 and 308 mean "moved permanently", 302 and 307 mean "temporarily over here", and 200 OK means a page was found. The last step, marked in teal, is where the link really ends.
Under What stands out you'll see plain-language notes. Amber notes deserve attention: a look-alike brand name, a website registered a few days ago, a raw IP address or a direct download. Grey notes are just information, like tracking codes or a link shortener. For a full walkthrough, see how to read your results.
| You see | What it usually means |
|---|---|
| One redirect, then a familiar site | A normal short link. Still check the final domain is the real one. |
| Several tracking steps, then a store | Typical of ads, newsletters and affiliate links. |
| A brand name on a site that isn't that brand | A common phishing pattern. Go to the company's site directly instead. |
| A website registered in the last few weeks | Many scam sites are only days old. Be cautious with anything asking for logins or payment. |
| The link ends on a file download | Don't open files you weren't expecting, especially .exe, .apk or .zip. |
Popular link shorteners
Legitimate shorteners such as bit.ly, TinyURL, Rebrandly and the shorteners built into X (t.co) and LinkedIn (lnkd.in) are used by millions of businesses every day. A short link on its own isn't a red flag. The question is always where it ends up, which is exactly what the expander answers.
Got a long link full of utm_ and fbclid codes instead? Use the URL Cleaner to tidy it before sharing.
Frequently asked questions
What is a link expander?
A link expander (also called a URL unshortener) reveals the full address behind a shortened link. It follows the short link's redirects and shows you where they end, without you having to open the link yourself.
Which short links does it work with?
All public ones, including bit.ly, tinyurl.com, t.co (X/Twitter), ow.ly, is.gd, buff.ly, rebrand.ly, cutt.ly, lnkd.in, amzn.to and custom branded short domains. If a link redirects using normal web redirects or a page refresh, the expander can follow it.
Does expanding a link tell the sender I clicked?
The sender's link service will usually record one visit, from our server rather than from you. It doesn't receive your IP address, device or location, and the visit isn't tied to you.
Why do some links show several redirects?
Marketing and ad links often pass through tracking services before reaching the real page, and some scam links bounce through several sites to hide their destination. A chain of three or more redirects isn't proof of anything, but it's worth a closer look.
Can it follow JavaScript redirects?
Not fully. Some pages forward visitors using code that only runs in a real browser. When we notice signs of that on the final page, the result says so. The address we show is the last one reached with standard redirects.